EUVD-2017-6087

Malware in sbrugna...

EUVD-2017-6086

Malware in sbrugna...

EUVD-2016-7571

Malware in sbrugna...

EUVD-2017-17021

Malware in sbrugna...

EUVD-2017-17043

Malware in sbrugna...

EUVD-2017-16384

Malware in sbrugna...

EUVD-2022-2959

Malicious code in bioql PyPI...

MAL-2025-26137 Malicious code in medallia-hipchat-notifier (npm)

The package medallia-hipchat-notifier was found to contain malicious code...

Malicious code in medallia-hipchat-notifier (npm)

The package medallia-hipchat-notifier was found to contain malicious code...

Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins. As of version 2.2.1, an enumeration of credentials IDs in this plugin...

GHSA-W3F7-2QFW-348X Jenkins HipChat Plugin allows credential capture due to incorrect authorization

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another...

GHSA-798P-53R7-MGW9 Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins. As of version 2.2.1, an enumeration of credentials IDs in this plugin...

Jenkins HipChat Plugin allows credential capture due to incorrect authorization

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (>=1.2.0, <=1.7.0) potentially affected by CVE-2021-39132 via org.rundeck:rundeck-core (2.1.1)

org.rundeck:rundeck-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin =1.2.0, =1.7.0 Source cves: CVE-2021-39132 Source advisory:...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (1.0.0), org.rundeck-plugins:rundeck-plugins-parent (2) +1 more potentially affected by CVE-2021-39132 via org.rundeck:rundeck-core (1.5.3)

org.rundeck:rundeck-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin 1.0.0 - org.rundeck-plugins:rundeck-plugins-parent 2 -...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (1.0.0), org.rundeck-plugins:rundeck-plugins-parent (2) +1 more potentially affected by CVE-2021-39133 via org.rundeck:rundeck-core (1.5.3)

org.rundeck:rundeck-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin 1.0.0 - org.rundeck-plugins:rundeck-plugins-parent 2 -...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (>=1.2.0, <=1.7.0) potentially affected by CVE-2021-39133 via org.rundeck:rundeck-core (2.1.1)

org.rundeck:rundeck-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin =1.2.0, =1.7.0 Source cves: CVE-2021-39133 Source advisory:...

SQL Injection in Jira Software Server [Integration for HipChat]

Affected versions of Jira Server have a SQL injection vulnerability that has now been fixed by removing the vulnerable HipChat integration plugin. Affected versions: versions 8.14.0 Fixed versions: 8.14.0 The plugin is no longer installed in new versions of Jira. However, the removal of the plugi...

SQL Injection in Jira Software Server [Integration for HipChat]

Affected versions of Jira Server have a SQL injection vulnerability that has now been fixed by removing the vulnerable HipChat integration plugin. Affected versions: versions 8.14.0 Fixed versions: 8.14.0 The plugin is no longer installed in new versions of Jira. However, the removal of the plugi...

Unspecified Vulnerability in CloudBees Jenkins HipChat Plugin

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . HipCha...